https://lukaszpastuszak.dev/tags/password-spray/Recent content in Password-Spray on Łukasz Pastuszak - security notesHugoen-usThu, 17 Jul 2025 00:00:00 +0000https://lukaszpastuszak.dev/writeups/redelegate/Thu, 17 Jul 2025 00:00:00 +0000https://lukaszpastuszak.dev/writeups/redelegate/Anonymous FTP exposes a KeePass database whose cracked seasonal passphrase unlocks MSSQL local auth, enabling domain user enumeration and a password spray to Marie.Curie, whose HelpDesk ForceChangePassword right resets Helen.Frost for WinRM, after which SeEnableDelegationPrivilege plus GenericAll over FS01$ configure constrained delegation to mint a DC service ticket and DCSync the Administrator hash.